Vulnerabilities

TI-2022-13680 CVE-2022-31787 · GHSA-9h4h-3fmc-xcrf

IdeaTMS 2022 is vulnerable to SQL Injection via the PATH_INFO

MEDIUM 45

IdeaTMS 2022 is vulnerable to SQL Injection via the PATH_INFO

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01479 Published 2022-06-22 No fix listed CWE-89

TI-2022-13679 CVE-2022-31786 · GHSA-mvq8-3mfv-fx2v

LOW 28

IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00726 Published 2022-06-21 No fix listed CWE-79

TI-2022-13681 CVE-2022-31788 · GHSA-cf44-q5xm-mxm4

MEDIUM 58

IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14658 Published 2022-06-10 No fix listed CWE-89